← Back to Breach Management
BR-2026-006InvestigationCritical
Unauthorized Database Access
Owner: Priya Mehta – Security · Business unit: Finance · Detected 30 Dec 1969, 07:00 pm
Board Notification SLA
497083h 47m overdue
Detected 30 Dec 1969, 07:00 pm · Deadline 02 Jan 1970, 07:00 pm
Overdue
Detailed Board update: Pending
100% of the 72-hour window elapsed
Incident Summary
An administrative account was used outside approved hours from an unrecognised network to query the payments data warehouse.
Breach Details
Occurred
30 Dec 1969, 03:00 pm
Detected
30 Dec 1969, 07:00 pm
Source
Insider Incident
Detection method
Security Monitoring
Location
Bengaluru, India
Business unit
Finance
Systems affected
Payment System, Data Warehouse
Data Processor
No
Records affected
6,120
Data Principals affected
5,980
Nature of breach
Unauthorized Access, Confidentiality Breach
Data categories
Name, Bank Account, Payment Information, Transaction Information, Login Credentials
Risk
91 / 100
Critical
LowMediumHighCritical
Data sensitivityHigh
Number affectedMedium
External exposureHigh
Financial impactMedium
Credential exposureHigh
Current Status
Breach lifecycle progress.
- Detected
- 2AssessmentCurrent stage
- 3Confirmed
- 4Board Notification
- 5DP Notification
- 6Remediation
- 7Closed